CVE-2022-0786 KiviCare < 2.3.9 - Unauthenticated SQLi
Unauthenticated attackers can exploit SQL injection in the KiviCare WordPress plugin to read or modify database contents.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-0786?
CVE-2022-0786 is a critical SQL injection vulnerability in Unknown KiviCare – Clinic & Patient Management System (EHR), published on 13 Jun 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The KiviCare WordPress plugin before 2.3.9 does not sanitise and escape some parameters before using them in SQL statements via the ajax_post AJAX action with the get_doctor_details route, leading to SQL Injections exploitable by unauthenticated users
Weakness: CWE-89
Which versions are affected by CVE-2022-0786?
It affects 1 product.
Products include Iqonic Kivicare.
How do I fix CVE-2022-0786?
No fix has been published for CVE-2022-0786 yet. Limit exposure of the affected software until one is available.
Use parameterised queries everywhere and never build SQL by joining strings. Upgrade affected software first; a web application firewall only buys time. More about SQL injection.
Is CVE-2022-0786 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2022-0786 exists.
Public exploit code: 1 Nuclei template.
Other vulnerabilities in Unknown KiviCare – Clinic & Patient Management System (EHR)
- CVE-2023-2628 KiviCare Management System < 3.2.1 - Multiple CSRF
- CVE-2024-11728 KiviCare – Clinic & Patient Management System (EHR) <= 3.6.4 - Unauthenticated SQL Injection
- CVE-2025-1572 SQL injection in KiviCare – Clinic & Patient Management System (EHR)
- CVE-2024-11729 KiviCare – Clinic & Patient Management System (EHR) <= 3.6.4 - Authenticated (Subscriber+) SQL Injection
- CVE-2024-11730 KiviCare – Clinic & Patient Management System (EHR) <= 3.6.4 - Authenticated (Doctor/Receptionist+) SQL Injection
Sources
Also known as GHSA-79q2-v554-rhr4.